de070dce63a549721fcc4147dbb050981bf3ddcd50ddd0a29048902deece5b3a | Triage

Sharing

General

Target

de070dce63a549721fcc4147dbb050981bf3ddcd50ddd0a29048902deece5b3a
Size

751KB
Sample

221123-p5rv5sda73
MD5

53a34a3c31092a9d52bd8f11b3ddc248
SHA1

d108ad4acf494082142e091ad413029eeaa4a211
SHA256

de070dce63a549721fcc4147dbb050981bf3ddcd50ddd0a29048902deece5b3a
SHA512

c575dc2b358114250fcb75789c91e77090cb135bb7d276a6368771f9a37cde6ad4be4364871178753479e6e6102d4371348f02dd6639bc2998370203f03d82cc
SSDEEP

12288:pRObekMvyFPhvBkbr8+WgV/I11ty+IPcS3aGE49wgUT5J+8iG:zObekS4P1ngK1oRkm56gUT5HiG

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  de070dce63a549721fcc4147dbb050981bf3ddcd50ddd0a29048902deece5b3a
- Size
  
  751KB
- MD5
  
  53a34a3c31092a9d52bd8f11b3ddc248
- SHA1
  
  d108ad4acf494082142e091ad413029eeaa4a211
- SHA256
  
  de070dce63a549721fcc4147dbb050981bf3ddcd50ddd0a29048902deece5b3a
- SHA512
  
  c575dc2b358114250fcb75789c91e77090cb135bb7d276a6368771f9a37cde6ad4be4364871178753479e6e6102d4371348f02dd6639bc2998370203f03d82cc
- SSDEEP
  
  12288:pRObekMvyFPhvBkbr8+WgV/I11ty+IPcS3aGE49wgUT5J+8iG:zObekS4P1ngK1oRkm56gUT5HiG
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2